Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UbjZMutGnVUHTbjg8hodJb6og-g.roa
File:                     UbjZMutGnVUHTbjg8hodJb6og-g.roa (raw, json)
Hash identifier:          mJvx6zsa0F2iWzVzSycojq1dz5lv07YVf+oLA7bA03M=
Subject key identifier:   51:B8:D9:32:EB:46:9D:55:07:4D:B8:E0:F2:1A:1D:25:BE:A8:83:E8
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E1B9EE1BB4583AC8FE114B6D66DDB340D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UbjZMutGnVUHTbjg8hodJb6og-g.roa
Signing time:             Fri 08 Mar 2024 01:13:01 +0000
ROA not before:           Fri 08 Mar 2024 01:13:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:1b:9e:e1:bb:45:83:ac:8f:e1:14:b6:d6:6d:db:34:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar  8 01:13:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=51b8d932eb469d55074db8e0f21a1d25bea883e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:bc:25:b0:05:8d:cc:c7:7a:93:03:8a:4f:
                    7b:2d:4b:7e:df:5c:a0:bd:d4:7f:81:1f:6a:cb:1e:
                    e6:e6:85:a6:e9:03:ec:79:5e:fe:a3:a6:67:a1:4c:
                    47:16:92:0c:cf:b9:ae:a2:aa:f9:67:84:d8:fe:cd:
                    a4:00:9a:d4:df:4d:83:8a:e7:fd:d1:cb:af:2f:95:
                    51:17:bc:b6:c4:fa:01:66:72:2a:ff:5b:2b:c5:47:
                    87:a7:6e:bc:f7:00:03:00:bd:e3:bd:f5:f7:eb:d9:
                    eb:12:bd:05:38:17:f3:4d:6f:3a:4a:00:37:ff:85:
                    1b:5d:b1:07:17:24:54:40:e0:2d:96:39:e3:4d:3f:
                    c9:e6:c3:a8:57:3c:d5:9a:59:0d:25:77:d3:14:3f:
                    5f:fd:50:3c:00:20:83:f2:99:d7:41:b2:cf:a5:04:
                    b4:b5:11:88:99:a8:9b:b9:9a:41:91:1d:c2:e8:7e:
                    9a:92:b3:70:b0:ec:67:44:40:27:1e:d3:be:3e:f1:
                    8c:18:92:9d:8c:e6:04:0a:19:b5:59:00:8c:3e:f5:
                    f7:b5:20:36:6e:f6:9d:3e:f4:d7:00:c5:65:47:5a:
                    47:d7:75:18:b1:12:ad:f4:e9:b4:42:b8:72:94:de:
                    d1:9e:7c:79:db:7e:f1:f9:de:85:ec:b0:95:dc:47:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B8:D9:32:EB:46:9D:55:07:4D:B8:E0:F2:1A:1D:25:BE:A8:83:E8
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/UbjZMutGnVUHTbjg8hodJb6og-g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:4b:26:b6:cb:07:84:97:d2:d3:20:61:7d:22:41:e1:c1:6e:
         cc:64:e7:9f:e6:f1:7b:60:01:56:a5:8e:a3:66:4f:72:45:a1:
         28:72:57:5b:ee:1e:51:d3:2b:ae:d5:e2:5d:1e:a0:3a:3c:04:
         00:12:2c:73:14:0e:76:73:5f:8b:8d:7b:ca:72:a6:a7:08:82:
         68:19:4e:37:65:f9:35:a1:1b:28:a1:83:ce:c3:a4:ba:c8:5a:
         68:8b:70:81:a5:7b:31:61:af:65:1c:c7:08:4b:0a:30:95:21:
         0a:4b:23:79:d4:8f:b9:36:87:f9:1c:4d:7d:9d:74:45:2d:81:
         10:c6:56:c1:1c:36:fd:09:14:27:bd:cd:67:7a:24:f8:06:0b:
         5b:26:bb:0c:4b:3b:6d:c2:ca:a8:40:ed:95:86:41:ea:db:44:
         58:d6:e5:5e:55:76:3e:32:e8:d4:40:13:6e:56:06:70:47:a4:
         e5:a1:c1:ec:50:2f:3a:bf:16:9e:bf:75:d2:5e:cd:cd:ba:dc:
         fb:07:8c:ba:d9:95:a3:3a:97:be:6b:51:92:fe:5e:a8:a1:ad:
         f7:bf:82:68:c7:40:6d:6a:f6:d8:2a:66:6f:32:d9:10:9f:e8:
         ac:14:d9:d1:53:53:5e:4b:fd:a7:9b:df:db:f0:71:c2:da:e6:
         3f:9d:64:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4bnuG7RYOsj+EUttZt2zQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA4MDExMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWI4ZDkzMmViNDY5ZDU1MDc0ZGI4ZTBmMjFhMWQyNWJlYTg4M2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv68JbAFjczHepMDik97LUt+31yg
vdR/gR9qyx7m5oWm6QPseV7+o6ZnoUxHFpIMz7muoqr5Z4TY/s2kAJrU302Diuf9
0cuvL5VRF7y2xPoBZnIq/1srxUeHp2689wADAL3jvfX369nrEr0FOBfzTW86SgA3
/4UbXbEHFyRUQOAtljnjTT/J5sOoVzzVmlkNJXfTFD9f/VA8ACCD8pnXQbLPpQS0
tRGImaibuZpBkR3C6H6akrNwsOxnREAnHtO+PvGMGJKdjOYEChm1WQCMPvX3tSA2
bvadPvTXAMVlR1pH13UYsRKt9Om0QrhylN7Rnnx5237x+d6F7LCV3EfpMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFG42TLrRp1VB0244PIaHSW+qIPoMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvVWJqWk11dEduVlVIVGJqZzhob2RKYjZvZy1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE1LJrbLB4SX0tMgYX0i
QeHBbsxk55/m8XtgAValjqNmT3JFoShyV1vuHlHTK67V4l0eoDo8BAASLHMUDnZz
X4uNe8pypqcIgmgZTjdl+TWhGyihg87DpLrIWmiLcIGlezFhr2UcxwhLCjCVIQpL
I3nUj7k2h/kcTX2ddEUtgRDGVsEcNv0JFCe9zWd6JPgGC1smuwxLO23CyqhA7ZWG
QerbRFjW5V5Vdj4y6NRAE25WBnBHpOWhwexQLzq/Fp6/ddJezc263PsHjLrZlaM6
l75rUZL+Xqihrfe/gmjHQG1q9tgqZm8y2RCf6KwU2dFTU15L/aeb39vwccLa5j+d
ZFg=
-----END CERTIFICATE-----